CVE Database
1066 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-93968 | LOW | 3.8 | A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1. This affects the function update of th… |
T1190
T1203
|
|
2026-09-20 |
| CVE-2026-92965 | LOW | 3.7 | The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting o… | — |
|
2026-09-20 |
| CVE-2026-92423 | LOW | 2.7 | The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restric… |
T1190
T1203
|
|
2026-09-20 |
| CVE-2026-81654 | LOW | 3.1 | The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user … |
T1190
T1203
|
|
2026-09-20 |
| CVE-2026-81652 | LOW | 2.7 | The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the re… |
T1190
T1203
|
|
2026-09-20 |
| CVE-2026-81651 | LOW | 3.1 | The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the us… |
T1190
T1203
|
|
2026-09-20 |
| CVE-2026-86551 | LOW | 3.3 | The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve th… |
T1190
T1203
|
|
2026-09-20 |
| CVE-2026-94055 | LOW | 3.7 | Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-fre… |
T1190
T1203
|
|
2026-09-19 |
| CVE-2026-93989 | LOW | 3.1 | vLLM through 0.29.0 fails to properly validate bad_words token indices against the model's generatio… |
T1190
T1203
|
|
2026-09-19 |
| CVE-2026-93956 | LOW | 3.5 | A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function Sear… |
T1190
T1203
|
|
2026-09-19 |
| CVE-2026-93987 | LOW | 3.4 | rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the `rclone serve do… | — |
|
2026-09-19 |
| CVE-2026-93986 | LOW | 3.1 | rclone before 1.75.1 fails to confine names from server and third-party listing responses to the lis… | — |
|
2026-09-19 |
| CVE-2026-93982 | LOW | 3.3 | OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query… | — |
|
2026-09-19 |
| CVE-2026-92420 | LOW | 3.8 | The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.2 does not… |
T1190
T1203
|
|
2026-09-19 |
| CVE-2026-92403 | LOW | 3.7 | The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end for… |
T1078
T1548
|
|
2026-09-19 |
| CVE-2025-15698 | LOW | 3.5 | The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its se… |
T1190
T1203
|
|
2026-09-19 |
| CVE-2026-63451 | LOW | 3.3 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M… |
T1190
T1059
+1
|
|
2026-09-18 |
| CVE-2026-63450 | LOW | 3.7 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-63449 | LOW | 3.7 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M… |
T1190
T1203
|
|
2026-09-18 |
| CVE-2026-57225 | LOW | 3.3 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M… |
T1190
T1203
|
|
2026-09-18 |